CVE-2025-23567

Name of the Vulnerable Software and Affected Versions Intuitive Design GDReseller versions prior to 1.6

Description The issue is a Cross-Site Request Forgery (CSRF) vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application, and also store malicious scripts that will be executed by the application.

Recommendations For versions prior to 1.6, update to a version that includes a fix for this issue, as no specific workaround is provided for these versions. As a temporary workaround, consider restricting access to sensitive functions and validating user input to minimize the risk of exploitation.